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(57) ABSTRACT 

A method and apparatus in the form of a peripheral device 
for downloading firmware responsive to a request by an 
operatively connected client computer from a connected 
host or a source to the peripheral device of the type which 
has a non-volatile memory, the peripheral device being 
adapted to download the firmware having the operating 
instructions and data into the non-volatile memory with at 
least one backup image partition for storing basic configu- 
ration and utility operations relating to the firmware and at 
least one code image partition for storing the firmware. The 
method includes the steps of receiving a download file for 
the requested firmware from the client computer, saving a 
specific data image of the file into one of the image partitions 
designated by the data image, performing an error check on 
the data image saved in the designated image partition, 
terminating the process if an error is found, and repeating the 
steps of the process for the next data image of said file if no 
error is found. 

18 Claims, 2 Drawing Sheets 
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METHOD AND APPARATUS FOR Yet another problem was that the prior method depended 

DOWNLOADING FIRMWARE TO A NON- upon the use of a simple network management protocol 

VOLATILE MEMORY ("SNMP") and a trivial file transfer protocol ("TFTP"), 

which was often very inflexible. As a result, the prior method 

The present invention generally relates to a method and 5 does not work well with the more standard software avail- 

an apparatus for downloading firmware from a connected able today, such as hypertext transfer protocol ("HTTP") and 

host or a source requested by an operatively connected client file transfer protocol ("FTP"). 

computer, more particularly, it relates to a method and Still another problem was that the prior method depended 

apparatus in the form of a peripheral device for downloading upon the SNMP Set Community Name for its security, 

firmware into a non-volatile memory with a backup image 10 which is transmitted in clear text over the network. Thus, the 

partition and a code image partition. prior method was insecure because no cryptographic secu- 

A peripheral device commonly stores its own configu- rity existed, 

ration and operational codes for usage with a computer, Accordingly, an object of the present invention is to 

which is generally stored as a firmware. The firmware is a provide an improved method for downloading firmware to a 

collection of the essential programs for the peripheral device 15 peripheral device that does not require execution of the 

that remain in storage even when the system is turned off. fail-safe data image until the end of the download process. 

The firmware is generally saved in the peripheral device Another object of the present invention is to provide an 

using non -volatile memory or the programmable flash improved method for downloading firmware to a peripheral 

memory. Since the computers need to be upgraded in time, device that is more reliable and faster, 

the firmware must also be upgraded for performance or to 20 Still another object of the present invention is to provide 

add new features. As a result, a new firmware must be an improved method for downloading firmware to a periph- 

downloaded and installed periodically by the users. eral device that is more secure. 

The non-volatile memory of the firmware is generally A further object of the present invention is to provide an 
divided into several partitions with specific storage defini- improved method for downloading firmware to a peripheral 
tions according to the type of information that is being 25 device that can accommodate the present standard software, 
stored. For example, there may be four partitions, specifi- 
cally the Basic Input/Output System ("BIOS") partition, the BRIEF SUMMARY OF THE INVENTION 
non-volatile data partition, the code image ("CI") partition^ ^ Qt mvention all relates t0 a method and an 
and the backup image ( BI ) partition^ In this case the CI s ^ tQe form of a ri heral device for downloading 
P^^*^^ ^.^^ storage of all the firmware. At the start 30 finnware ^ to a t b m operativel y ^ 
of a download process, the BI partition stores the backup Qected ^ uter from a host or a source> 
image of the firmware, which is the basic configuration and and more ticularl to a method and peripheral device for 
utility operations relating to the firmware. Tne code image of down!oading firmware mto the non-volatile memory with a 
the firmware, which is the codes of the actual firmware is M ition and a c , ^ ^ nt mfhod and 
thee i saved ui the CI partition after a successful download of 35 periphera l device does not require the execution of the 
the backup image. fail-safe data image, such as the backup image discussed 

If the download is successful, the backup image will not earlier> dufin ^ dowmoad cess in order for it t0 take 

be used at all. Because the code image is generally much effect> resultin ^ a more reliablCj flwdblfi ^ faslef 

larger than the backup image, an error, such as a power method 

failure, may occur during the download process of the code 40 ' . , . . , , . 

image. In that case, the information from the backup image a In accordance with this invention the peripheral device 

is used to restart the downloading process from the step of a download file for the requested firmware 

downloading the code image instead of starting the down- &om the chent computer. Then, rt saves a specific data image 

load process at the very beginning. The backup image allows ° f & me lnl ° ° ne of the ™»ge Partitions designated by the 

for a fail-safe method of downloading. 45 datl ""f ' ^ an error check is performed for the data 

Previous technology required that the backup image be ima 8 e - If , an e ? or w * ,he data "° a 8 e ° cc « n . then the 

executed during the download process before it could actu- penpheral terminates the process. However, the process is 

ally be used. More precisely, the backup image's instruc- < e P eated for the next data ima 6 e of the flle * n0 error 15 

tions must first be carried out (i.e., the execution) before the touna. 

peripheral device can actually use the basic configuration 50 Other objects, features and advantages will become 

and utility operations saved in the BI partition to restart the apparent upon reading the following detailed description, in 

download process in the event of a transmission interrup- conjunction with the attached drawings, in which: 

tion. This was so because the backup image was saved in the FIG. 1 is a schematic diagram of an exemplary connection 

non-volatile memory; but at the same time, it was executed between a peripheral device and a client computer receiving 

also from the non-volatile memory. Since the backup image 55 from a host or a source in which the present invention may 

did not take effect until execution, the transmission had to be be implemented; and, 

interrupted while awaiting execution of the backup image. FIG. 2 is a flowchart illustrating the preferred subroutine 

Then, the non-volatile memory switched back to the receiv- 0 f tne peripheral device during the download process, 
ing mode. 

One problem with this prior method was that the switch- 60 TABLE OF ACRONYMS 

ing and the interruption of the transmission caused errors in ™ t A - , tt.ch- 

r A i* *i_ j i j The patent references several acronyms. The following 

greater frequency. As a result, the download process was t . r , t ... , * , . . . t , & 

unreliable table is provided to aid the reader in determining the 

Another problem was that the switch between the receiv- meaning of the several acronyms. 

ing and executing mode, and then switching back to the 65 BIOS-Basic Input/Output System 

receiving mode for the CI partition significantly slowed BUBackup Image 

down the download process. CI -Code Image 
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CRC=Cyclic Redundancy Code Check 
FTP«File Transfer Protocol 
HTTP-Hypertext Transfer Protocol 

RAM=Randorn Access Memory 5 
SNMP-Simple Network Management Protocol 
TFTP=Trivial File Transfer Protocol 

DETAILED DESCRIPTION 

Broadly stated, the present invention relates to a method 10 
and apparatus for downloading firmware from a connected 
host or a source requested by an operatively connected client 
computer, allowing for a fail safe download process that 
does not require the execution of the backup image data 
before the code image can be downloaded. The present 15 
process accommodates the storing of the complete requested 
firmware file in the non -volatile memory or programmable 
flash memory, and any execution processes are done using 
the random access memory ("RAM") instead of flash 
memory. Thus, the present method avoids switching 20 
between the receiving mode and the execution mode during 
the download process. 

Turning now to FIG. 1, a schematic diagram of an 
exemplary connection between a peripheral device and a 25 
client computer receiving from a connected host or a source 
is shown. Several examples of the source or the connected 
host are shown, but the implementation of the present 
invention can vary, and an array of implementations are 
within the scope of the present invention. In this example, a 30 
peripheral device 10 is connected to a client computer 12. 
The client computer 12 is connected to a connected host or 
a source 14, such as another computer 16, a CD Rom drive 
18, or the Internet 20, for receiving data, which are to be 
transmitted to the peripheral device 10. However, the client 35 
computer 12 may not necessarily be connected to another 
computer 16 or the Internet 20. For example, the client 
computer 12 may be receiving data from a CD Rom drive 
20. In fact, the firmware file can also be stored in the hard 
drive (not shown) of the client computer 12. 40 

FIG. 2 shows a flowchart of the preferred subroutine of 
the peripheral device 10 during the download process. 
Before the start of the process (block 22), the peripheral 
device 10 must be operatively connected to the client 
computer 12 (block 24). In addition, the client computer 12 45 
must initiate the start of the subroutine by sending the 
download file to the peripheral device 10 (block 26). After 
the initiation, the peripheral device 10, at first, receives only 
a few bytes of the download file (block 28) for checking the 
data format (block 30) to ensure that a proper file is being 50 
received. If the format of the download file is not proper 
(block 32), the peripheral device 10 sends an error message 
to the client computer 12 (block 34) and the download 
process is then aborted (block 36). On the other hand, if the 
format of the download file is proper (block 32), the periph- 55 
eral device 10 starts saving the backup image of the down- 
load file in the BI partition of the non-volatile memory 
(block 38). 

As noted earlier, the backup image contains the basic 
configuration and utility operation relating to the download 60 
and firmware, which is used as a fail-safe device in the event 
that the download process is interrupted. The backup image 
is preferably the first data image to be saved in the process, 
however, it is not necessary for implementation of the 
present invention. For example, there may be instances 65 
when the download file is divided into more than just the 
backup image and code image, and the third data image may 



,212 Bl 

4 

be the smallest in size. In such a case, it may be more 
desirable to download the third data image first since it is the 
smallest part of the download file. There may also be other 
instances where downloading the backup image first would 
be inefficient or impracticable. Notwithstanding these other 
possibilities, downloading of the backup image first is still 
preferred in the present invention, although it is unnecessary. 
Nonetheless, the order is generally defined by the download 
file rather than the peripheral device 10. 

The peripheral device 10 continues saving the backup 
image into the BI partition (block 38) until the download is 
completed (block 40). When the download is complete 
(block 40), the peripheral device 10 performs an error check 
on the backup image (block 42). More specifically, it is 
preferred that a cyclic redundancy code check ("CRC") is 
used for the error check. If an error is found (block 44), an 
error message will be sent to the client computer 12 (block 
34) and the download process is terminated (block 36). 

Otherwise, the peripheral device 10 continues to save the 
code image into the CI partition (block 46). The saving of 
the code image (block 46) continues until completion (block 
48), which is followed by another error check specifically 
for the downloaded code image (block 50). Similarly, the 
CRC is preferred, but other data error checks may be used 
and are within the scope of the present invention. An error 
message is again sent out to the client computer (block 34) 
if an error is found by the CRC (block 52), and the download 
process is aborted as a result (block 36). But if an error is not 
found (block 52), the peripheral device 10 sends a download 
successful message to the client computer 12 (block 54). The 
peripheral device shuts down (block 56) to restart in order to 
execute the downloaded firmware (block 58) and the process 
is finished (block 60). 

The code image represents the actual firmware of the 
download file. To distinguish the code image from the 
backup image, the code image is the part of the file that the 
peripheral device 10 uses for the actual upgrade. On the 
other hand, the backup image is information that the periph- 
eral device 10 uses if there is a break in the download 
process of the code image. Although in this example, only 
the backup image and the code image are shown. The 
present method contemplates downloading other data image 
and are within the scope of the present invention. 
Furthermore, the labeling of the backup image and code 
image is arbitrary and has no effect on the present invention. 
Thus, other names for the plurality of memory partitions 
may be used and are also within the scope of the present 
invention. It is further contemplated that the present inven- 
tion can download firmware having more than two data 
image types. 

From the foregoing description, it should be understood 
that an improved method and peripheral device for down- 
loading firmware have been shown and described which 
have many desirable attributes and advantages. The method 
and peripheral device eliminate the need for the fail-safe 
data image of the download file to be executed during the 
download process before becoming effective. As a result, the 
switching mode of the non-volatile memory is no longer 
necessary, resulting in a more reliable, flexible and faster 
method. The present invention allows for the saving of the 
download file into the non-volatile memory while using only 
RAM for executions. 

While various embodiments of the present invention have 
been shown and described, it should be understood that other 
modifications, substitutions and alternatives are apparent to 
one of ordinary skill in the art. Such modifications, substi- 
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unions and alternatives can be made without departing from 
the spirit and scope of the invention, which should be 
determined from the appended claims. 

Various features of the invention are set forth in the 
appended claims. 

What is claimed is: 

1. A method for downloading firmware responsive to a 
request by an operatively connected client computer from a 
connected host or a source to a peripheral device of the type 
which has a non-volatile memory, the peripheral device 
being adapted to download the firmware comprising the 
operating instructions and data into the non -volatile memory 
having at least one backup image partition for storing basic 
configuration and utility operations relating to the firmware 
and at least one code image partition for storing the 
firmware, the method comprising the steps of: 

receiving a download file for the requested firmware from 

the client computer; 
saving a specific data image of said file into one of the 

image partitions designated by said data image; 
performing an error check on said data image saved in the 

designated image partition; 
initiating a termination process if an error is found; and, 
repeating the above steps of the process for the next data 

image of said file if no error is found. 

2. The method according to claim 1 further comprises the 
step of initiating said termination process once all the data 
images for said file have been received for each designated 
image partition. 

3. The method according to claim 2 wherein said step of 
ending the process further comprises the steps of: 

sending a download-success message to the client com- 
puter; 

shutting down the peripheral device; and, 
restarting the peripheral device to execute said down- 
loaded firmware. 

4. The method according to claim 1 wherein said specific 
data image is determined by said file. 

5. The method according to claim 1 wherein said specific 
data image is a backup image of a basic configuration and 
utility operations of the firmware. 

6. The method according to claim 5 wherein said backup 
image is used for restoring the download process using the 
information of the basic configuration and utility operations 
of the firmware. 

7. The method according to claim 5 wherein said backup 
image is the first data image for downloading. 

8. The method according to claim 1 wherein said specific 
data image is a code image of the firmware. 

9. The method according to claim 1 wherein prior to said 
step of saving a specific data image, further comprising the 
steps of: 

checking said file for an acceptable format; 
receiving said file if the format is acceptable; and, 
initiating said termination process if the format is unac- 
ceptable. 
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10. The method according to claim 9 wherein said step of 
checking said file further comprises the step of reading the 
first few bytes of said incoming file. 

11. The method according to claim 9 wherein said step of 
initiating said termination process further comprises the step 
of sending an error message to the client. 

12. The method according to claim 1 wherein said step of 
saving a specific data image further comprises the steps of: 

receiving said data image from the client; and, 

storing said data image in said designated image partition. 

13. The method according to claim 1 wherein said step of 
performing an error-check further comprises the step of 
executing a cyclic redundancy code check for said data 
image. 

14. The method according to claim 1 wherein said step of 
initiating said termination process further comprises the step 
of sending an error message to the client. 

15. The method according to claim 1 further comprises 
the step of executing the data images from random access 
memory once all the date images for said file have been 
received for each designated image partition. 

16. The method according to claim 1 wherein the code 
image is downloaded without executing the backup image. 

17. A peripheral device for downloading firmware from a 
connected host or a source to a peripheral device that has 
been requested by an operatively connected client computer, 
the peripheral device having a non-volatile memory with at 
least one backup image partition for storing basic configu- 
ration and utility operations relating to the firmware and at 
least one code image partition for storing the firmware, said 
peripheral device comprising: 

means for receiving a file for the requested firmware from 

the client computer; 
means for saving a specific data image of said file into one 

of the code image partitions designated by said data 

image; 

means for performing an error check on said data image 
saved in the designated image partition; 

means for initiating a termination process if an error is 
found; and, 

means for repeating the process for the next data image of 
said file if no error is found. 

18. A computer program product comprising a computer 
readable code stored on a computer readable medium that, 
when executed, the computer program product causes a 
computer to: 

receive a download file for the requested firmware from 

the client computer; 
save a specific data image of said file into one of the image 

partitions designated by said data image; 
perform an error check on said data image saved in the 

designated image partition; 
initiate a termination process if an error is found; and, 
repeat the above steps of the process for the next data 

image of said file if no error is found. 
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